r/mariadb

We’ve seen a significant increase in security reports this year, with AI-assisted research clearly playing a role.

I wrote a post looking at what happened, how reports are triaged, the difference between a report and a confirmed vulnerability, and how those confirmed issues have been fixed and published through security advisories and CVEs.

Feedback and discussion are very welcome:

https://mariadb.org/when-ai-finds-the-bugs-we-missed-a-very-busy-year-for-mariadb-security/